当我们重启 TMG 服务器以后，发现一些 TMG 相关服务没有启动，可能看到以下报错：

Event Type: Error
Event ID: 7022
Description:
The Microsoft Forefront TMG Control service hung on starting.

Event Type: Error
Event ID: 7001
Description:
The Microsoft Forefront TMG Firewall service depends on the Microsoft Forefront TMG Control service which failed to start because of the following error:
After starting, the service hung in a start-pending state

Event Type: Error
Event ID: 7001
Description:
The Microsoft Forefront TMG Managed Control service depends on the Microsoft Forefront TMG Control service which failed to start because of the following error:
After starting, the service hung in a start-pending state.

Event Type: Error
Event ID: 7001
Description:
The Microsoft Forefront TMG Job Scheduler service depends on the Microsoft Forefront TMG Control service which failed to start because of the following error:
After starting, the service hung in a start-pending state.

如果 TMG 的 array member 是在 workgroup 内的，并且在 TMG 上的存有 "Client Authentication" 类型的证书(在 local computer\ Personal store 下)，那么可以尝试使用管理员权限打开命令行窗口，并使用以下脚本来调整 isactrl 的服务依赖：

sc config isactrl depend= RasMan/SSTPSVC/FwEng/ISASTG/bfe/mpssvc/HTTP/KeyIso

需要注意的是，每次在 TMG 打完补丁后，您必须再次运行以上脚本。

微软安全专家

James Yi